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Appendices 

Appendix A, which forms a p^ of this disclosure, is a list of commonly 
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Appendix A is hereby incorporated^herem in its entirety by reference thereto. 

Copvright Rights 

A portion of the di^losure of this patent document contains material which is 
subject to copyright protection. The copyright owner has no objection to the facsimile 
reproduction by anvitoe of the patent docxmient or the patent disclosure, as it appears 
in the Patent and/Trademark Office patent files or records, but otherwise reserves all 
copyright righ^ whatsoever. 


Field of the Invention 
^The present invention relates to computer networks and their management 
systems. Specifically, the present invention relates to an apparatus for configuring, 
lanaging, or displaying the operating conditions in a computer network. 


Background of the Invention 
SNMP Manager and SNMP Agent 

Computer network management systems use a standardized communication 
protocol to facilitate conmiunication between devices (computers, printers, peripherals) 
on the network. The standardized conmiunication protocol discussed with this 
invention is known as the Simple Network Management Protocol (SNMP). SNMP 
is explained in more detail in The Simple Book by Marshall T. Rose, 2d ed, Prentice- 
Hall, Inc., 1994, which is hereby incorporated herein by reference. The SNMP acts 
as a mechanism to provide and transport management information between network 
components. SNMP is recognized as an industry standard for network management. 
Whenever a program at the user side sends a request to a program at the server site 
and waits for a response, the requesting program is called the 'client' and the 
responding program is called the 'server.' In network server management systems, 
the user (usually a network administrator) uses a software module known as a SNMP 
manager to monitor and manage the server or servers in a network. The SNMP 
manager sends commands to and receives information from a software module called 
a SNMP agent, which directly monitors and controls the server through device drivers 
and other components. The SNMP manager and the SNMP agent can be on the same 
work station, or the SNMP manager can be at a remote location. 

SNMP uses a transport protocol stack such as User Datagram Protocol/Internet 
Protocol (UDP/IP) or Transmission Control Protocol/Internet Protocol (TCP/IP). 
UDP/IP provides connectionless communication over user Internet Protocol services. 
It is part of the TCP/IP suite. UDP/IP operates at the transport layer, and in contrast 
to TCP/IP, does not guarantee the delivery of data. TCP/IP is standard Internet 
protocol (or set of protocols) which specifies how two computers exchange data over 
the Internet. TCP/IP handles issues such as packetization, packet addressing, 
handshaking and error correction. For more information on TCP/IP, see Volumes I, 
II and III of Comer and Stevens, Internetworking with TCP/IP, Prentice Hall, Inc., 
ISBNs 0-13-46&505-9 (vol. I), 0-13-125527-4 (vol. II), and 0-13-474222-2 (vol. III). 

Upon receiving a data request by a user, the SNMP manager opens one or 
more SNMP sessions and formulates a proper information request for SNMP agent. 
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The SNMP manager is the 'client' and the SNMP agent is the 'server.' The SNMP 
manager may be generic or specifically designed for the particular server type. 

Typically, the SNMP manager has several parts, each perfotming a different 
function. But these parts are related and work together to accomplish certain tasks. 
One of these tasks may be to display malfunctions and environment changes in the 
server. 

Prior inventions and deficiencies 

The SNMP agent may detect a malfunction or an environment change in the 
server and send a warning message to the SNMP manager. Some network server 
managers receive and display a warning message (an alert) associated with every 
malfunction and environment change on the server that the agent detects. This allows 
the user to take further action if needed, such as to shut the server down and replace 
components. 

However, time is critical for many server manager applications. A network 
administrator may not need to be informed of all alerts generated by a server. 
Displaying every alert disrupts the network administrator's present task. This can be 
a major nuisance if the same alert is continuously sent by the SNMP agent for a minor 
environment change. 

Displaying every alert also takes up valuable time for the network administrator 
to investigate what the alert is because the displayed alert may not be readily apparent 
to the user. For example, in some server management applications, an icon starts 
flashing at. the top right hand comer signifying an alert. The user clicks on the icon, 
pullsdown a menu item or open? an object to view a description of the alert. Often, 
the description fails to inform the user of what the exact problem is or how to remedy 
the situation. The user then needs to then refer to a support manual or ask a more 
experienced user. 

Furthermore, by sending, receiving, and displaying all alerts, the server 
manager is taking up valuable bandwidth on the network. This increases the amount 
of traffic already on the network and decreases the performance of each computer. 
It also increases bottlenecking and system failures. A major goal in the computer 
network industry today is to reduce the amount and size of traffic on the network. 


If there is more than one server in the network, the problem is compoimded. 
Sending every malfunction and environment alert can overwhelm the system and its 
network administrator. 

For example, an airline or bank may have several servers where timing, number 
of transactions, and size of transactions are different for each server. An airline may 
use one server for managing ticket sales, one server to handle frequent flyer 
transactions, and another server to handle arriving flight information. Each server may 
have its own typCy^network components, response times, and backup systems capable 
of handling malfunctions or environment changes. One type of alert on the airline's 
server handling arrival times may demand immediate attention. On the other hand, 
the same type of alert generated by a server handling frequent flyer mileage may not 
require immediate attention. 

Summary of the Invention 
The present invention provides an apparatus for monitoring alerts regarding the 
status of components in a computer. In one embodiment of the invention, this 
apparatus comprises at least one processor, which is configured to receive a plurality 
of alerts. These alerts may provide status information about different components in 
a computer. The apparatus may further comprise an alert module executing in the 
processor. The alert module may be configured to selectively disable the display of 
one or more of the status notifications. The alert module may be further configured 
to record status information associated with the disabled status notifications in a 
storage medium. 

Brief Description of the Drawings 

These and other aspects, advantages, and novel features of the one embodiment 
of the invention will become apparent upon reading the following detailed description 
and upon reference to the accompanying drawings in which: 

Figure 1 illustrates a high level architectural overview of a network server 
management system in accordance with one embodiment of the invention. 
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Figure 2 illustrates a module-level architecture in accordance with one 
embodiment of the invention. 

Figure 3 illustrates the window where the user may access the alert manager 
in a server manager system in one embodiment of the claimed invention. 

Figure 4A illustrates one embodiment of the alert manager window. 

Figure 4B lists the description of each alert type in one embodiment of the 
invention that appears in the alert manager window and the alert notification window. 

Figure 5 illustrates one embodiment of an alert notification window when an 
alert is received by the server manager. 

Figure 6 illustrates one embodiment of a log window. 

Figure 7 illustrates the sequence of acts that may occur when the user starts the 
main application in one embodiment of the present invention. 

Figure 8 illustrates one module-level process of how the network map window 
is created in one embodiment of the present invention. 

Figure 9 illustrates one sequence of acts that occur when the user configures 
a list of alerts or deletes an alert for a particular server(s). 

Figure 10 illustrates the contents of the Alert Manager Module in one 
embodiment of the invention. 

Figure 11 illustrates one module-level process of how an alert is generated and 
handled by the alert configurator. 

Figure 12 illustrates one sequence of acts that occur when the user opens the 
Log Window. 

Detailed Description of the Invention 
Some alerts (also known as traps) regarding component malfunctions and 
environment changes in the server may have a higher priority than others because the 
network administrator (user) may need to take appropriate action immediately. These 
high priority alerts may be essential to avoid network disruption or fiirther system 
damage. Other alerts have a lower priority, which do not require inunediate attention. 
For these alerts, the network administrator may be able to postpone investigation or 

• 
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repair for a more convenient time. Sometimes, the alert may not need investigation 
at all. 

One embodiment of the invention allows the network administrator to 
configure, manage, and display certain alerts for a network server or a number of 
network servers. Specifically, the network administrator can enable or disable one or 
more future alert notifications. 

For example, a typical alert may occur when a temperature sensor in the server 
rises above a predetermined level. If the network administrator does not wish to view 
temperature alerts, he or she can delete all future notifications of temperature alerts. 
The network administrator can also enable fixture temperature alerts for one server and 
disable it for all other servers, or any combination the administrator chooses. 

One embodiment of the invention also creates an entry in a log file of each 
component malfunction or environment change detected in the server. This log file 
may be stored in a storage medium such as the computer memory which may include 
random access memory, volatile memory, non- volatile memory, a hard disk, magnetic 
memory, optical memory, CD ROM, digital versatile disks and the like. Each log 
entry may contain the number of the alert, the date of the alert, the time of the alert, 
the source of the alert, the category of alert, a description of the alert, and details of 
the alert. The details may contain a recommended course of action for the user. One 
embodiment of the invention can create these log entries even if the user has disabled 
the display of the alert. Thus, the user can view the alert log file and keep track of 
each type of alert and when they occurred. 
Architectural Overview 

Figure 1 illustrates a high level architectural overview of a network server 
management system in accordance with one embodiment of the invention. In one 
embodiment of the present invention, the alert configurator and manager, hereinafter 
alert configurator, application is contained in a software module called Maestro 
Central 107 nlanufactured by NetFRAME Systems Incorporated of Milpitas, CA. 
Maestro Central 107 may be used in a Microsoft Windows environment. Maestro 
Central 107 sends instructions to the SNMP manager 108. 
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In one embodiment of the invention, the chent and server computers 102 and 
136 are on multi-processor Pentium Pro-based computers having 256 megabytes or 
more of RAM. It vdll be apparent to those of ordinary skill in the art, however, that 
the computers 102 and 136 may be any conventional general purpose single- or multi- 
chip microprocessor such as a Pentium processor, a Pentium Pro processor, a 8051 
processor, a MIPS processor, a Power PC processor, an ALPHA processor, etc. In 
addition, the computers 102 and 136 may be any conventional special purpose 
microprocessor such as a digital signal processor or a graphics processor. 

At the user (or client) side, the SNMP manager 108 displays data to the user 
through a communication layer that organizes the data into data structures. The 
display device at the user station 102 in Figure 1 may be liquid crystal device, cathode 
ray tube (CRT) or other suitable display device. When the SNMP manager 108 
receives a conunand from the user, it calls a standard Windows SNMP Library of 
objects 112, which sends messages using an SNMP protocol stack 114, such as 
UDP/IP, to the SNMP agent 128 via a network of drivers 116, adapters 118, and 
network medium 120. 

At the server side, the SNMP agent 128 retrieves information regarding 
malfunctions or certain environment conditions detected in the server 136. If there is 
more than one server in the network, then there is an SNMP agent 128 associated with 
each server. 

In one embodiment of the present invention, the server 136 is an NF9008 (also 
known as NF9000-T) manufactured by NetFRAME Systems Incorporated of Milpitas, 
CA. The NF9008 series are fault-tolerant, standards-based servers, which have 
multiple peripheral component interconnect (PCI) card slots for one or more adapters. 
In another embodiment of the present invention, the server 136 is an NF9016 (also 
known as an NF9000-C), which has multiple canisters or fault isolation units (FIU), 
These canisters are boxes which may each contain more than one PCI adaptor card 
slots. Multiple card slots and multiple canisters allow the user to remove or add 
adapters to the server while the server and operating system continue to run. 

In one embodiment of the present invention, the SNMP agent 128 retrieves 
information from device drivers 124 and a self-contained network of distributed 
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service microprocessors called Intrapulse 122. Intrapulse 122 is manufactured by 
NetFRAME Systems Incorporated of Milpitas, CA. This self-contained network 
continuously monitors and manages the physical environment of the server, regardless 
of the operational status of the server (a component of the server may be 
malfunctioning). Malfunctions and environment conditions may include temperature, 
fan speed, voltage levels, and power supplies. The SNMP agent 128 also sends 
messages to the SNMP manager 108 via a network of drivers 132, adapters 134, and 
network medium 120. 

Overview of Module-level structure and Description of Modules 

An 'object' as used here and in object-oriented programming is a variable that 
may comprise both routines (methods) and data. An object is treated as a discrete 
entity and may have its own address. Some objects, may only contain data and no 
routines. 

An 'alert' as used in this description refers to the definition and description of 
status messages, the format of status messages, the content of status messages, the 
generated status messages, the received status messages, the operational properties of 
different components. 

A 'class' as xised here is a blueprint of an object. From a class with specified 
properties, methods, and functions, the application can create objects with those same 
properties, methods, and functions. Once the object is created, the application can 
modify the properties of the object and the data in the object. An application can use 
multiple objects of the same class. A class may also be used to describe a group of 
objects sharing the same properties, etc. 

Objects and classes are explained in more detail in Object Programming with 
Visual Basic4 by Joel P. Dehlin and Matthew J. Curland, Microsoft Press, 1996, and 
Computer Dictionary by collective authors, Microsoft Press, 1991, which are 
incorporated in its entirety by reference. 

In the following description of one embodiment of the invention, a 'module' 
includes, but is not limited to, software or hardware components which perform 
certain tasks. Thus, a module may include object-oriented software components, class 
components, procedures, subroutines, data structures, segments of program code, 
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drivers, firmware, microcode, circuitry, data, data structures, tables, arrays, etc. In 
addition, those with ordinary skill in the art will recognize that a module can be 
implemented using a wide variety of different software and hardware techniques. A 
module may also mean a published report by a group of experts defining MIB objects 
for a particular area of technology. RFC 1213, Management Information Base for 
Network Management ofTCP/IP-based Internets: MIB-IIy contains a module defining 
the basic objects needed to manage a TCP-IP network. 

Figure 2 illustrates a module-level architecture in accordance with one 
embodiment of the invention. The "start application" block 200 is the first step where 
all modules and dialog boxes used for one embodiment the present invention are 
created. In one embodiment of the invention, this application is a C+-i- class file 
called "maestro2.ccp." 

The CMain Frame Class 210 creates all the windows and graphical user 
interfaces used in one embodiment of the present invention. This is also know as the 
Microsoft Foundation Class (MFC) Document/View Architecture. The Document 
Class 226 stores the data about the application in data structures. The View Class 228 
displays to the user a representation of the data kept in the Document class which are 
defined by Microsoft Corporation. The use of these classes is explained in more detail 
in Inside OLE, 2d edition, 1995 by Kraig Brockschmidt (p. 720, 814), which is hereby 
incorporated herein in its entirety by reference. 

The Network Map Window Module 212 may perform a number of functions 
in addition to displaying the Network Map Window 302 as shown in Figure 3. The 
Network Map Window Module 212 may also display each server 136 in the network 
as an icon in the Network Map Window 302, display each server in the Alert Manager 
Window 400, and create a list of alerts for each server 136. The Network Map 
Window Module 212 may call the EnumServer Module 208 to discover the names and 
number of servers in the network. The Network Map Window Module 212 may also 
call the SNMP Module 204 to obtain the list of servers and their alerts in the Alert 
Manager Table 1002 of the Alert Manager Module 202. This list of alerts is called 
a Server Alert Module 1004. Each server 136 has a Server Alert Module 1004. If 
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there are more than one servers 136, then there are more than one Server Alert 
Modules 1004 in the Alert Manager Table 1002. 

The EnumServer Module 208 stores mformation, in the memory of the 
microprocessor 102, The EnumServer Module 208 is a local module, but it is global 
in the sense that it is accessible from anywhere in the system. This EnumServer 
Module 208 identifies the number of servers in the system. For example, if there are 
multiple servers, the EnumServer Module 208 acts as a repository of server 
information. 

The SNMP Module 204 is a class that encapsulates all the SNMP functions 
used by one embodiment of the present invention, such as "GET," "GET NEXT," and 
"SET." The GET function is typically used by the SNMP agent 128 to retrieve non- 
table SNMP MIB data from the server 136 in response to a request by the SNMP 
manager 108. The GET NEXT function is used to retrieve more than one MIB 
variable, such as a table of variables. Often, a loop is created with GET NEXT until 
all values are retrieved. The SET function is used by the SNMP agent 128 to change 
the v£ilue of MIB variable. 

In general, a MIB defmes the aspects of a system and/or components in the 
system, such as a disk drive or a memory module. The MIB may contain numeric 
identifiers which tell system components how to access each variable. In one 
embodiment of the invention, the MIB 110 contains a hierarchal collection of variables 
related to the hardware and software components of the server. Using the MIB 
variables, the SNMP manager 108 (more specifically, the SNMP Module 204) creates 
an information request which is sent to the SNMP agent 128. 

MIB variables are known by those with skill in the art. For example, U.S. 
Patent No. 5,471,617 entitled COMPUTER MANAGEMENT SYSTEM AND 
ASSOCIATED MANAGEMENT INFORMATION BASE issued to Farrand et al 
which is hereby incorporated herein in its entirety, describes the operation of a basic 
MIB in detail. 

The SNMP Module 204 also receives alerts from the server 136. The SNMP 
Module 204 passes this information to the Alert Manager Module 202 via the SNMP 
Window Module 206. 
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The SNMP Window Module 206 is used to pass messages among applications. 
The SNMP Window Module 206 allows an application, such as an alert configurator, 
to communicate with the SNMP itself. The use and operation of an SNMP Window 
Module 206 is well known to those of ordinary skill in the art. 

The Alert Manager Module 202 performs a number of functions: it creates the 
alert types, registers the alert types for each server in the network, stores information 
regarding each server's user-selected alerts in an Alert Manager Table 1002 shown in 
Figure 10, and temporarily stores the data related to an incoming alert. This data 
related to an incoming alert may be displayed in an alert notification window and/or 
sent to log file. In one embodiment of the invention, the alert notification window is 
called the Alert Notification Window 500, and the log file is managed by a Log 
Manager Module 224 and a Log Window Entries Module 220. 

The Log Window Entries Module 220 receives information about each detected 
alert from the Alert Manager Module 202 and adds the entries to a table in the Log 
Manager Module 224. The Log Manager Module 224 keeps a list of Log Window 
Modules, which are entries to be shown in the Log Window in Figure 6. The Log 
Manager Module 224 uses a Log Manager Window Module 222 to display the list of 
alert entries which include server name, alert type, the time and date of the alert, their 
descriptions, and details. 
Start Application 

Figure 7 shows the start application process in one embodiment of the present 
invention. In Figure 7, the alert configurator and manager can be accessed after the 
user starts an application called "maestro2.ccp" (herein referred to as "Maestro" 200) 
a C-H- class file, as shown in block 702. 

Maestro 200 calls standard Microsoft initialization modules 704 to perform 
standard housekeeping functions 708. Maestro 200 also calls or initializes a standard 
dynamic link library (DLL) such as the Windows SNMP (WinSNMP) DLL 
(WinSNMP Library) 710 manufactured by American Computer Electronic 
Corporation. The WinSNMP Library is used to do SNMP transactions while the 
application Maestro is running. DLLs execute under the Microsoft Windows NT or 
Windows 95 operating systems. 


Maestro 200 creates (1) a Microsoft Foundation Class DocumentA^iew 
Architecture (MFC DocA^iew Architecture) 210 shown in block 720; (2) an SNMP 
Module 204 shown in block 714; (3) an EnumServer Module 208 shown in block 716; 
and (4) an Alert Manager Module 202 shown in 722. Each of these modules are 
further explained in detail. 

The MFC DocA^iew Architecture shown in block 720 creates all the windows 
and graphical user interfaces used in one embodiment of the present invention. This 
is illustrated in Figure 8. Specifically, the WinSNMP Library creates the CMain 
Frame Class 210, the Document Class 226, and the View Class 228. As described 
above, the Document Class 226 keeps the data about the application, and the View 
Class 228 displays to the user a representation of the data kept in the Document Class 
226. The Main Frame Class 210 creates the Alert Manager Window 400, the Alert 
Notification Window 500, and the Log Window 600. 

As shown in block 806, the CMainFrame Class 210 also calls the Network 
Map Window Module 212 to display the Network Map Window 302. The Network 
Map Window Module 212 calls the EnumServer Module 208 to discover the number 
of servers in the network and the names of each server 136. The EnumServer Module 
208 then adds a server icon and server name to the Network Map Window 302 for 
each server 136 foimd. The EnumServer Module 208 also adds the names of the 
servers foimd to the Alert Manager Table 1004 inside the Alert Manager Module 202. 

For each server 136 found, the Network Map Window Module 212 calls the 
Alert Manager Module 202 to create and store a list of each server's alerts in the Alert 
Manager Table 1002 of the Alert Manager Module 202. This is shown in blocks 816, 
818, and 820. For each alert, there is a textual description, detail, and notify/do not 
notify status. This list of alerts for each server is called a Server Alert Module 214. 
Each server has its own Server Alert Module 214. The Server Alert Modules 214 are 
stored within the Alert Manager Table 1002 which is stored within the Alert Manager 
Module 202. In other words, if there are two servers, the Alert Manager Table 1002 
contains two Server Alert Modules 214. 

The Maestro 200 also creates the SNMP Module 204 in block 714. And the 
SNMP Module 204 creates the SNMP Window Module 206 as shovm in block 718. 
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In one embodiment of the invention, the SNMP Window Module 206 interacts with 
the WinSNMP Library to pass messages between applications. The WinSNMP 
Library uses a window while transacting SNMP operations. The Maestro application 
may use a hidden window which is not visible on the user's desktop while the 
application is running. The SNMP Window Module 206 allows an application, such 
as an alert configurator, to communicate with the SNMP itself. 

Maestro 200 also creates the EnumServer Module 208 shown in block 716. 
The EnumServer Module 208 is empty at this point, but it is made global for future 
access from anywhere in the system. When the application is running, there may be 
certain information that is constantly extrapolated by different parts of the ^stem. For 
example, there may be multiple servers that use the same or similar data. This 
information is stored locally in a central location such as the EnumServer Module 208. 
It acts as a repository. In one embodiment of the present invention, the EnumServer 
Module 208 discovers the names and number of NetFRAME servers on the network 
and stores this information in an EnumServer Module list as shown in blocks 726 and 
732. 

Maestro 200 also creates the Alert Manager Module 202 as shown in block 
722. The Alert Manager Module 202 performs a number of functions: it creates the 
alert types; registers the alert types for each server 136 in the network; stores 
information regarding each server's user-selected alerts in an Alert Manager Table 
1002 shown in Figure 10; calls the Alert Manager Dialog Module 216 to display the 
server and its alerts as shown in block 724; temporarily stores the data related to an 
incoming alert; and calls the Alert Flash Dialog Module 218 to display an alert 
notification shown in Figure 5. The Alert Manager Table 1002 keeps track of (1) the 
names of each server 136, (2) the alerts associated with each server 136, and (3) the 
notify/do not notify status of each alert for each server 136. 

After the user starts the Maestro application 200, the user can access the alert 
configurator and manager software application from the Network Map Window 302. 
The user clicks and pulls down the "Window" menu 304 and selects the "Alert 
Window" item 308. When "Alert Window" 308 is selected, the SNMP manager 108 
displays an "Alert Manager" Window 400 as shown in Figure 4A. 
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Alert Types in One Embodiment of the Invention 

In one embodiment of the present invention, there are eight alert types that may 
be generated by an SNMP agent 128 in connection with a fault-tolerant server such 
as the NetFRAME NF9000. These eight alerts are defined in the NF9000 server's 
customized MIB 110. It will be apparent to those of ordinary skill in the art, 
however, that other alerts related to a server may be used in a server management 
system. 

In one embodiment of the present invention, the first alert type is identified by 
the MIB variable "trapCpu" and assigned the identifier 1.3.6.1.4.1.837.2.1.1 in the 
server's MIB 110. This alert type reports the number of a CPU (cpuNumber) that 
failed because of high temperature and/or low power. When trapCpu is sent from the 
SNMP agent 128 to the SNMP manager 108, the information stored in the trapCpu 
variable itself is actually the value of the MIB variable "cpuNumber" for that 
particular CPU. The MIB variable cpuNumber is used here to identify the number of 
the CPU that failed. 

For example, for CPU number 2 in the server, the value of variable 
"cpuNumber" is equal to 2. When CPU number 2 fails, the SNMP agent 128 sends 
a "trapCpu" message to the SNMP manager 108. Within that "trapCpu" variable is 
the value of the "cpuNumber" which is equal to 2. This number can be used by the 
SNMP Module 204 to index the cpuTable and retrieve more information on the failed 
CPU. 

The second alert type is identified by the MIB variable "trapSystemBoardFan" 
and assigned the identifier 1.3.6.1.4.1.837.2.1.2 in the server's MIB 110. This alert 
type reports the number of a failed system board fan (coolingFanNumber). A fan 
'fails' when the speed of that fan drops below a predetermined minimum speed in the 
MIB variable "coolingFanMinSpeed." This variable can be set/modified by the user. 
When trapSystemBoardFan is sent from the SNMP agent 128 to the SNMP manager 
108, the information stored in the trapSystemBoardFan variable itself is actually the 
value of the MIB variable "coolingFanNumber" for that particular fan. The MIB 
variable coolingFanNumber is used here to identify the number of the fan that failed. 
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This number can be used by the SNMP Module 204 to index the coolingFanTable and 
retrieve more information on the failed fan. 

The third alert type is identified by the MIB variable "trapTemperature" and 
assigned the identifier 1.3.6.1.4.1.837.2.1.3 in the server's MIB 110. This alert type 
reports the number of a temperature sensor (coolingSensorNumber) that detected a 
"normal" to "warning" transition. More specifically, the temperature sensor detected 
a temperature above the "warning" level defmed by the MIB variable 
"coolingAlertTemperature." This variable can be set/modified by the user. When 
trapTemperature is sent from the SNMP agent 128 to the SNMP manager 108, the 
information stored in the trapTemperature variable itself is actually the value of the 
MIB variable "coolingSensor Number" for that particular temperature sensor. The 
MIB variable coolingSensorNumber is used here to identify the number of the 
temperature sensor that detected a temperature above the "warning" level. This 
number can be used by the SNMP Module 204 to index the 
coolingTemperatureSensorTable and retrieve more information on the temperature 
sensor. 

The fourth alert type is identified by the MIB variable "trapPowerSupply" and 
assigned the identifier 1.3.6.1.4.1.837.2.1.4 in the server's MIB 110. This alert type 
reports the number of a power supply (powerSupplyNumber) that has detected one of 
four possible conditions: (1) power supply has been extracted; (2) power supply has 
been inserted; (3) an AC failure meaning the AC state of the power supply is out of 
tolerance range; or (4) a DC failure meaning the DC state of the power supply is out 
of tolerance range. In one embodiment of the invention, the server is a NF9008. For 
an NF9008, AC state information and insertion/extraction events are not available, but 
a change in DC state may indicate a failure or power supply insertion/extraction. 

When trapPowerSupply is sent from the SNMP agent 128 to the SNMP 
manager 108, the information stored in the trapPowerSupply variable itself is actually 
the value of the MIB variable "powerSupplyNumber" for that particular power supply. 
The MIB variable powerSupplyNumber is used here to identify the number of the 
power supply that failed. This number can be used by the SNMP Module 204 to 
index the powerSupplyTable and retrieve more information on the power supply. 
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The fifth alert type is identified by the MIB variable "trapCanister" and 
assigned the identifier 1.3.6.1.4.1.837.2.1.5 in the server's MIB 110. This alert type 
reports the name of the canister (canisterName) that has been extracted or inserted. 
This alert type is not available for the NF9008 because the NF9008 does not have any 
canisters. When trapCanister is sent from the SNMP agent 128 to the SNMP manager 
108, the information stored in the trapCanister variable itself is actually the value of 
the MIB variable "canisterName" for that particular canister. The MIB variable 
canisterName is used here to identify the name of the canister that has been extracted 
or inserted. This name can be used by the SNMP Module 204 to index the 
canisterTable and retrieve more information on the extracted/inserted canister. 

The sixth alert type is identified by the MIB variable "trapAdapter" and 
assigned the identifier 1.3.6.1.4.1.837.2.1.6 in the server's MIB 110. This alert type 
reports the number of an adapter (adapterName) or its driver that malfunctioned. 
When trapAdapter is sent from the SNMP agent 128 to the SNMP manager 108, the 
information stored in the trapAdapter variable itself is actually the value of the 
variable "adapterNumber" for that particular adapter. The MIB variable 
adapterNumber is used here to identify the number of the adapter or its driver that 
failed. This number can be used by the SNMP Module 204 to index the adapterTable 
and retrieve more information on the failed adapter or its driver. 

The seventh alert type is identified by the variable "trapSlotFan" and assigned 
the identifier 1.3.6.1.4.1.837.2.1.7 in the server's MIB 110. This alert type reports the 
number of an I/O slot fan (slotFanNumber) that failed. A fan 'fails' when the speed 
of that fan drops below a predetermined minimum speed in the MIB variable 
"slotFanMinSpeed." This variable can be set/modified by the user. When trapSlotFan 
is sent fi-om the SNMP agent 128 to the SNMP manager 108, the information stored 
in the trapSlotFan variable itself is actually the value of the variable "slotFanNumber" 
for that particular slot fan. The MIB variable slotFanNumber is used here to identify 
the number of the slot fan that failed. This number can be used by the SNMP Module 
204 to index the slotFanTable and retrieve more information on the failed fan. 

The eighth alert type is identified by the variable "trapCanisterFan" and 
assigned the identifier 1.3.6.1.4.1.837.2.1.8 in the server's MIB 110. This alert type 
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reports the name of the canister (canisterName) which has at least one fan operating 
below a predetermined minimum limit allowed. This predetermined minimum speed 
is defined by the MIB variable "canisterFanMinSpeed." This variable can be 
set/modified by the user. When trapCanisterFan is sent firom the SNMP agent 128 to 
the SNMP manager 108, the information stored in the trapCanisterFan variable itself 
is actually the value of the variable "canisterNumber" for that particular canister. The 
MIB variable canisterNumber identifies the name of the canister with at least one 

failed fan. This name can be used by the SNMP Module 204 to index the 

canisterTable and retrieve more information on the failed fan. 

The alert types are displayed in the Alert Manager Window 400 shown in 

Figure 4A. After each alert type, there is a brief description 412 of the alert type. 

The descriptions are Hsted in Figure 4B. In one embodiment of the invention, the text 

associated with each type of alert is hardcoded in the application itself, such as 

Maestro Central 107. 

Adding/Deleting One or More Alert Notifications 

Figure 9 shows the process for deleting one or more alert notifications for one 

or more servers. The process for adding an alert notification is similar to the process 

shown in Figure 9. The user can open the Alert Manager Window 400 clicking and 

pulling down the "Window" menu 304 and selecting the "Alert Window" item 308. 

When "Alert Window" 308 is selected, the SNMP manager 108 displays an "Alert 

Manager" Window 400 as shown in Figure 4A. 

In one embodiment of the present invention, the default mode for the SNMP 

manager 108 is to receive and display/notify the user of all alerts received firom all 
servers. To change the defauU mode, the user may delete the alert notification for one 
or more alerts and for one or more servers. This can be done fi-om the Alert Manager 
Window 400 shown in Figure 4A. For example, the user can delete the Adapter Alert 
414 and the Canister Alert 416 notifications for one server and delete the CPU Alert 
418, the Fan Alert 422, and the Temperature Sensor Alert 428 notifications for another 
server. In other words, each server can have its own user-configvired list of alerts. 

When the Alert Manager Window 400 is first displayed, all alert types 410 are 
listed on the left side with a red bell icon 414 through 428 in one embodiment of the 
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present invention. As shown in block 900, if the user clicks on any of the red bell 
icons associated with an alert type, that bell icon becomes yellow. For example, if the 
user wants to delete the Canister Alert 416 notification, the user would click on the 
red bell next to the Canister Alert 416. The red bell next to Canister Alert 416 turns 
yellow. 

But the alert notification is not deleted immediately; the notification deletion 
only occurs after the user clicks on the "Delete Notification" button 438 on the right 
side of the Alert Manager Window 400. Before the user clicks on the "Delete 
Notification" button 438, the user can click on other alert types to be deleted. After 
the user finishes selecting all the alert notifications to be deleted, the user clicks on 
the "Delete Notification" button 438. All alert notifications to be deleted are deleted 
together. Thus, the user can delete more than one alert notifications for one or all 
servers with a single command. This is shown in block 904. When the user is 
finished selecting alert types, the user clicks on the "Delete Notification" button 438 
as shown in block 906. 

The process is similar for adding one or more alert notifications for one or 
more servers. The process described above and shown in Figure 9 is the same except 
the bell icon 414 through 428 turns from yellow to red, and the user clicks on the 
"Add Notification" button 436 instead of the "Delete Notification" button 438. 

One embodiment of the present invention also allows the user to add or delete 
alert notifications for more than one server without reopening the Alert Manager 
Window 400. After the user selects the alert types to be deleted and clicks on the 
"Delete Notification" button 438, the Alert Manager Window 400 remains open on the 
user's desktop. The user can then go to the Server Name box 406 and view a list of 
servers in the network by clicking and pulling down the scroll-down button 408. The 
user can then select another server name from the list of servers. The name of this 
server appears in the Server Name box 406 and the Alert Manager Window 400 
displays the alert configuration for this particular server. The user can then add or 
delete alert notifications for this second server following the steps shown in Figure 9 
and described above. Thus, each server in the network can have its own user- 
configured list of alerts. 
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In addition, one embodiment of the present invention allows the user to delete 
one or more alert notifications for all servers at once by clicking in the "All Servers" 
box 432 and clicking on the "Add Notification" button 436 or the "Delete 
Notification" button 438. Similarly, the user can add or delete all alert notifications 
for one or ftiore servers by clicking on the "All Alerts" box 434 and clicking on the 
"Add Notification" button 436 or the "Delete Notification" button 438. 

After the user finishes configuring the server or servers, the user can go back 
to the Network Map Window 302 by clicking on the "Close" button 440 or the "X" 
402 at the top right comer of the Alert Manager Window 400. 
Incoming Alert 

In general, when an alert is generated, the SNMP agent 128 may send two 
pieces of information in a protocol data unit to the SNMP manager 108: (1) the trap 
type and (2) the number or name of the individual device where the trap was detected. 
This is shown in Figure 11 as block 1102. The SNMP manager 108 relays the 
message to the SNMP Module 204 and the Alert Manager Module 202. The SNMP 
manager 108 automatically knows which server 136 generated the alert because in any 
SNMP communication the source address and destination address are part of the 
message. 

The SNMP manager 108 may later go back to the SNMP agent 128 to find 
other information related to the failed device or environment condition, but this is a 
separate transaction from the completed alert message. 

Specifically, the WinSNMP Library receives the alert firom the SNMP agent 
128 in block 1102. In block 1104, the WinSNMP Library notifies the SNMP Window 
Module 206. In block 1106, the SNMP Window Module 206 notifies the SNMP 
Module 204. The SNMP Module 204 in turn goes to the Alert Manager Module 202 
and finds the Server Alert Module 214 associated with the server 136 that generated 
the alert. The SNMP Module 204 looks for the server name and alert type in the 
Alert Manager Table 1002 shown in Figure 10. If the alert type for that particular 
server is set on notify user, then the SNMP Module 204 retrieves the alert message 
associated with that particular alert type. These alert messages are listed in Figure 4B. 
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The application then calls the Alert Flash Dialog Module 218 and displays the Alert 
Notification Window as shown in Figure 5. 

In one embodiment of the invention, the Alert Manager Module 202 
temporarily stores the data related to an incoming alert. This data may include the 
name of the server, the alert type, the time and date of the alert, the description of the 
alert type, and other details. The details may contain a recommended course of action 
for the user. The data related to an incoming alert may be displayed in an alert 
notification window by the Alert Flash Dialog Module 218. In one embodiment of 
the invention, the alert notification dialog box is called the Alert Notification Window 
218. This is shovm in Figure 5. The Alert Notification Window 218 displays the 
name of the server 504, the date and time of the alert detected 506, a description of 
the alert type 510, and details of the alert 514. The Alert Window 218 remains on the 
user's desktop until the user clicks on the "Close" button 508 or the "X" 502 at the 
top. 

The Alert Manager Module 202 also sends the alert information to the Log 
Manager Module 224 which creates or adds a log entry for that alert using the Log 
Windows Entries Module. 

Figure 12 illustrates the module-level process of how the user opens the Log 
Window shown in Figure 6. The user may open the Log Window the same way the 
user opens the Alert Manager Window 400 as described above. In one embodiment 
of the present invention, the user can pull down the "Window" menu 304 from the top 
of the desktop 300 and select the "Log Window" menu item. The Log Manager 
Module 224 then calls the Log Manager Window 222 and the Log Window Entries 
Module 224 to display the Log Window 600 as shown in Figure 6. 

The Log Window 600 displays the server names 602, the alert log entry 
numbers 604, the dates and times of the alerts 606, the sources of the alerts 608, the 
category of the alerts 610, the descriptions of the alert types 612, and details of the 
alerts 614. The user can scroll up or down in the log file with the scroll button 616. 
In one embodiment of the invention, the text associated with each type of alert is 
hardcoded in thie application itself, such as Maestro Central 107. 
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Advantages of One Embodiment of the Present Invention 

One advantage of an embodiment of the present invention is that it avoids 
unwanted disruptions. This is particularly important in time-critical server 
management applications. The network administrator may not want to be interrupted 
in his or her present task every time an SNMP agent 128 detects a minor malfunction 
or environment change in the server. One embodiment of the present invention allows 
the user to select the alerts he or she personally believes are important. 

For example, a first-time user may wish to view all types of alert notifications 
because he or she is unfamiliar with the network, the server type, the individual server 
components or the server manager software. This may be time-consuming, but a first- 
time user would rather be safe. 

On the other hand, a more experienced network administrator may only want 
to view two or three types of alerts that he or she feels are significant. For instance, 
in one embodiment of the present invention, the system board fans of the server have 
at least twice the cooling capacity, which means if one fan ceases to operate another 
fan can handle the extra load. A more experienced user may wish to see minor 
malfimctions, such as fan failures, stored in the log file at the end of the week or 
when he or she has time. This eliminates unwanted disruptions to the administrator's 
present work. 

Another advantage of one embodiment of the claimed invention is its capability 
to quickly configure a customized list of alert notifications for each server in the 
network. For example, the user can delete the Adapter Alert 414 and the Canister 
Alert 416 notifications for one server and delete the Power Supply Alert 424, the Fan 
Alert 422, and the Temperature Sensor Alert 428 notifications for another server. 
Thus, each server in the network can have its own user-configured list of alerts. This 
can be very useful if each server has a different environment or purpose in which only 
certain alert notifications are important and not others. 

Furthermore, the user can do this in one window, the Alert Manager Window 
400, at one time without opening and reopening this window. The Alert Manager 
Window 400 does not close when the user finishes deleting or adding alert 


-21- 


notifications. It closes only when the user decides to close it. This saves time and 
reduces the probability of mistakes. 

Another advantage of one embodiment of the present invention is that it saves 
the network administrator time to look up the type of alert generated. One 
embodiment of invention creates and displays a dialog box that automatically appears 
on the user's screen when an alert is received by the server manager. The user does 
not need to go looking for the alert by opening a dialog box or pxilling down a menu 
item. One embodiment of invention gives the user data about the alert such as a full 
description of the alert, the time and date it was detected, and further instructions on 
what to do and the like. 

Another advantage of one embodiment of the present invention is that by only 
sending user-selected alerts, it saves valuable bandwidth on the network. A major 
goal of network servers and system managers today is to reduce traffic packets on the 
network. In one embodiment of the invention, the explanatory text for each type of 
alert and other instructions is hardcoded into the SNMP manager 108 software. The 
only message that the SNMP agent 128 sends is an identifier telling the SNMP 
manager 108 the type of alert and which server generated the alert. This further 
reduces traffic bottlenecks on the network and improves response times. 

Another advantage of one embodiment of the present invention is that it 
facilitates removing and adding server components such as PCI boards without 
shutting down the whole server system (also known as HotPlug and HotAdd). 
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